Lucene search
Fluid AttacksCVELIST:CVE-2023-44166HistorySep 28, 2023 - 9:51 p.m.
CVE-2023-44166 Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
2023-09-2821:51:51
CWE-89
Fluid Attacks
www.cve.org
1
cve-2023-44166
online
movie ticket booking
unauthenticated
sql injections
process registration
database
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0.001
Percentile
46.7%
The ‘age’ parameter of the process_registration.php resource
does not validate the characters received and they
are sent unfiltered to the database.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Online Movie Ticket Booking System",
"vendor": "Online Movie Ticket Booking System",
"versions": [
{
"status": "affected",
"version": "1.0"
}
]
}
]Related
vulnrichment
vulnrichment
prion
prion
Design/Logic Flaw
2023-09-28 22:15:00
nvd
nvd
CVE-2023-44166
2023-09-28 22:15:10
cve
cve
CVE-2023-44166
2023-09-28 22:15:10
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0.001
Percentile
46.7%
Related for CVELIST:CVE-2023-44166